ROS-20260401-73-0032

Vulnerability in libpng15 related to buffer copying without checking input size. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2026-24810

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in rethinkdb src/cjson modules. This vulnerability is associated with program files cJSON.Cc. This issue affects rethinkdb: through v2.4.4...

CVE-2025-47394

CVE-2025-47394 describes memory corruption caused by incorrect offset calculations when copying overlapping buffers during memory operations. The Red Hat entry echoes this description, noting a memory corruption condition from overlapping-buffer copy due to miscalculated offsets. The available do...

Linux Distros Unpatched Vulnerability : CVE-2023-53513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbdioctl arg without verification. The UBSAN warning calltrace like below:...

EUVD-2018-17634

Malware in sbrugna...

EUVD-2018-17635

Malware in sbrugna...

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

...

PT-2025-25856

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential out-of-bound write issue has been resolved in the Linux kernel, specifically in the gpio: virtuser component. The problem occurred when the input size exceeded the buffer siz...

CVE-2024-31225 Lack of size check and buffer overflow in RIOT

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The onrdinit function does not implement a size check before copying data to the resultbuf static buffer. If an attacker can craft a long enough...

Buffer Overflow

PaddlePaddle is vulnerable to Buffer Overflow. The vulnerability is caused due to missing input size checks within the paddle.searchsorted function, which may lead to Denial of Service DoS...

TRENDnet TEW-755AP 缓冲区错误漏洞

The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from the lack of size checking of input data in the setlogonum parameter of the icpsetlogoimg sub41DBF4 function, which can be exploited by an attacker to execute...

TRENDnet TEW-755AP 缓冲区错误漏洞

The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the wpsstaenrolleepin parameter in the setstaenrolleepin24g function, which can be exploited by an attacker to execute...

PT-2022-5677 · D Link · D-Link Dir-3060

Name of the Vulnerable Software and Affected Versions: D-Link DIR3060 version DIR3060A1 FW111B04.bin Description: The issue is related to a buffer overflow in the D-Link DIR-3060 router's firmware. Specifically, the FUN 0049ac18 function is vulnerable due to the lack of size checking for input...

jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck

jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck loop indefinitely until...

Unspecified vulnerability in Google Android Qualcomm component (CNVD-2017-11062)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component in versions of Android prior to 7.1.1. Th...

GLSA-201702-02 : RTMPDump: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-02 RTMPDump: Multiple vulnerabilities Multiple vulnerabilities have been discovered in RTMPDump. The following is a list of vulnerabilities fixed: Additional decode input size checks Ignore zero-length packets Potential...